KsepDsEventPnpIrp
VOID __stdcall KsepDsEventPnpIrp(
_DRIVER_OBJECT *DriverObject,
_DEVICE_OBJECT *Fdo,
_IRP *Irp,
UINT64 MinorCode,
INT64 Status){
REGHANDLE v5;
_EVENT_DATA_DESCRIPTOR UserData;
_DEVICE_OBJECT **v7;
int v8;
int v9;
_IRP **v10;
int v11;
int v12;
int *v13;
int v14;
int v15;
INT64 *p_Status;
int v17;
int v18;
_DRIVER_OBJECT *v19;
_DEVICE_OBJECT *v20;
_IRP *v21;
int v22;
v22 = MinorCode;
v21 = Irp;
v20 = Fdo;
v19 = DriverObject;
v5 = *(&stru_140CF2E80 + 627);
if( *(&stru_140CF2E80 + 627) )
{
if( EtwEventEnabled(*(&stru_140CF2E80 + 627), &KseDsEventPnpIrp) )
{
UserData.Reserved = 0;
v9 = 0;
v12 = 0;
v15 = 0;
v18 = 0;
UserData.Ptr = (unsigned __int64)&v19;
v7 = &v20;
v10 = &v21;
v13 = &v22;
UserData.Size = 8;
v8 = 8;
v11 = 8;
p_Status = &Status;
v14 = 4;
v17 = 4;
EtwWriteEx(v5, &KseDsEventPnpIrp, 0i64, 0, 0, 0, 5u, &UserData);
}
}
}Referenced by:
KseDsCallbackHookIrpPnpFunction